---
typeId: req
recordId: benac-inv-009
fields:
  title: Mediated package composition
  statement: Benac shall support, or define an explicit mediated mechanism for, a package
    invocation to request invocation of another package interface or descriptor through
    the Host Station's mediated invocation path. Such child invocations shall be subject
    to ordinary package trust, descriptor trust, request validation, selected package
    interface resolution, capability grants, leases, data-class policy, evidence
    recording, effect recording, diagnostics, resource limits, failure behavior, and
    Local Policy. Child invocation records shall reference the parent invocation where
    applicable. A package shall not gain ambient authority to invoke arbitrary packages
    merely because it is executing.
  rationale: Workflow-like behavior, orchestration, and agent-authored composite behavior
    should be expressible as packages. Benac Core should provide the legible interchange
    between package invocations, not define workflow semantics. This lets agents build
    small composite tools, run them, inspect failures, and refine them while every child
    invocation remains attributable, bounded, and auditable.
  verification: A composite package invokes an authorized child calculator package and
    records parent/child invocation links, request snapshots, output snapshots, selected
    package interfaces, evidence, effects, diagnostics, and capability checks. A second
    fixture attempts to invoke an unauthorized child package or descriptor and records a
    denied effect or failed child invocation without granting authority or silently
    falling back.
  testable: true
  status: draft
  area: BENAC-INV
  sourceDocument: operator ticket 266e382d-cab9-4be7-b70c-6cfb7b49dccb
  sourceVersion: 2026-05-04
  sourceSections:
    - 10.10 Invocation, evidence, effects, audit, and tamper-evidence
  order: 110.1
---
